{"id":"https://openalex.org/W4320025532","doi":"https://doi.org/10.1109/asianhost56390.2022.10022111","title":"HARD-Lite: A Lightweight Hardware Anomaly Realtime Detection Framework Targeting Ransomware","display_name":"HARD-Lite: A Lightweight Hardware Anomaly Realtime Detection Framework Targeting Ransomware","publication_year":2022,"publication_date":"2022-12-14","ids":{"openalex":"https://openalex.org/W4320025532","doi":"https://doi.org/10.1109/asianhost56390.2022.10022111"},"language":"en","primary_location":{"id":"doi:10.1109/asianhost56390.2022.10022111","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/asianhost56390.2022.10022111","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 Asian Hardware Oriented Security and Trust Symposium (AsianHOST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026092389","display_name":"Chutitep Woralert","orcid":"https://orcid.org/0000-0001-9113-3009"},"institutions":[{"id":"https://openalex.org/I16944753","display_name":"Clarkson University","ror":"https://ror.org/03rwgpn18","country_code":"US","type":"education","lineage":["https://openalex.org/I16944753"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chutitep Woralert","raw_affiliation_strings":["Clarkson University,Department of Electrical and Computer Engineering,New York,USA","Department of Electrical and Computer Engineering, Clarkson University, New York, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Clarkson University,Department of Electrical and Computer Engineering,New York,USA","institution_ids":["https://openalex.org/I16944753"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Clarkson University, New York, USA","institution_ids":["https://openalex.org/I16944753"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100322200","display_name":"Chen Liu","orcid":"https://orcid.org/0000-0003-1558-6836"},"institutions":[{"id":"https://openalex.org/I16944753","display_name":"Clarkson University","ror":"https://ror.org/03rwgpn18","country_code":"US","type":"education","lineage":["https://openalex.org/I16944753"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Chen Liu","raw_affiliation_strings":["Clarkson University,Department of Electrical and Computer Engineering,New York,USA","Department of Electrical and Computer Engineering, Clarkson University, New York, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Clarkson University,Department of Electrical and Computer Engineering,New York,USA","institution_ids":["https://openalex.org/I16944753"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Clarkson University, New York, USA","institution_ids":["https://openalex.org/I16944753"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032412535","display_name":"Zander Blasingame","orcid":"https://orcid.org/0000-0002-9508-8425"},"institutions":[{"id":"https://openalex.org/I16944753","display_name":"Clarkson University","ror":"https://ror.org/03rwgpn18","country_code":"US","type":"education","lineage":["https://openalex.org/I16944753"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zander Blasingame","raw_affiliation_strings":["Clarkson University,Department of Electrical and Computer Engineering,New York,USA","Department of Electrical and Computer Engineering, Clarkson University, New York, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Clarkson University,Department of Electrical and Computer Engineering,New York,USA","institution_ids":["https://openalex.org/I16944753"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Clarkson University, New York, USA","institution_ids":["https://openalex.org/I16944753"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I16944753"],"apc_list":null,"apc_paid":null,"fwci":0.9228,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.7671572,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"abs/1607.00148","issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9214620590209961},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8194718956947327},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6615655422210693},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.5962449312210083},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5936251282691956},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5460813045501709},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.436825692653656},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4339388310909271},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.41020703315734863},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.34283578395843506},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.31477004289627075},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.3078170716762543},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2664278745651245},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1726396679878235}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9214620590209961},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8194718956947327},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6615655422210693},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.5962449312210083},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5936251282691956},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5460813045501709},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.436825692653656},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4339388310909271},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.41020703315734863},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34283578395843506},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31477004289627075},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3078170716762543},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2664278745651245},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1726396679878235},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/asianhost56390.2022.10022111","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/asianhost56390.2022.10022111","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 Asian Hardware Oriented Security and Trust Symposium (AsianHOST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7400000095367432,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2064675550","https://openalex.org/W2461373307","https://openalex.org/W2787744061","https://openalex.org/W2928980918","https://openalex.org/W2950774332","https://openalex.org/W2955466398","https://openalex.org/W2960747589","https://openalex.org/W3016526453","https://openalex.org/W3044316786","https://openalex.org/W3106973390","https://openalex.org/W4205540825","https://openalex.org/W4297814361","https://openalex.org/W6720514713","https://openalex.org/W6762976101"],"related_works":["https://openalex.org/W1975357770","https://openalex.org/W2439951656","https://openalex.org/W1573526548","https://openalex.org/W4360982091","https://openalex.org/W3176864451","https://openalex.org/W2053632570","https://openalex.org/W3211525895","https://openalex.org/W2187910102","https://openalex.org/W2128507946","https://openalex.org/W4254552916"],"abstract_inverted_index":{"Recent":[0],"years":[1],"have":[2],"witnessed":[3],"a":[4,11,72,138,154],"surge":[5],"in":[6,98,103],"ransomware":[7,15,35,61,121],"attacks.":[8],"Especially,":[9],"many":[10],"new":[12],"variant":[13],"of":[14,91,115],"has":[16,126],"continued":[17],"to":[18,59,84,100,153],"emerge,":[19],"employing":[20],"more":[21],"advanced":[22],"techniques":[23],"distributing":[24,142],"the":[25,32,88,108,113,143,146],"payload":[26],"while":[27],"avoiding":[28],"detection.":[29],"This":[30],"renders":[31],"traditional":[33],"static":[34],"detection":[36,109],"mechanism":[37],"ineffective.":[38],"In":[39],"this":[40],"paper,":[41],"we":[42,81],"present":[43],"our":[44],"Hardware":[45],"Anomaly":[46],"Realtime":[47],"Detection":[48],"-":[49],"Lightweight":[50],"(HARD-Lite)":[51],"framework":[52],"that":[53,141,149],"employs":[54],"semi-supervised":[55],"machine":[56,148],"learning":[57],"method":[58],"detect":[60,101],"using":[62,67],"low-level":[63],"hardware":[64],"information.":[65],"By":[66],"an":[68],"LSTM":[69],"network":[70],"with":[71,137],"weighted":[73],"majority":[74],"voting":[75],"ensemble":[76],"and":[77],"exponential":[78],"moving":[79],"average,":[80],"are":[82],"able":[83],"take":[85],"into":[86],"consideration":[87],"temporal":[89],"aspect":[90],"hardware-level":[92],"information":[93],"formed":[94],"as":[95,161],"time":[96],"series":[97],"order":[99],"deviation":[102],"system":[104],"behavior,":[105],"thereby":[106],"increasing":[107],"accuracy":[110],"whilst":[111],"reducing":[112],"number":[114],"false":[116],"positives.":[117],"Testing":[118],"against":[119],"various":[120],"across":[122],"multiple":[123],"families,":[124],"HARD-Lite":[125],"demonstrated":[127],"remarkable":[128],"effectiveness,":[129],"detecting":[130],"all":[131],"cases":[132],"tested":[133],"successfully.":[134],"What's":[135],"more,":[136],"hierarchical":[139],"design":[140],"classifier":[144],"from":[145],"user":[147],"is":[150],"under":[151],"monitoring":[152],"server":[155],"machine,":[156],"Hard-Lite":[157],"enables":[158],"good":[159],"scalability":[160],"well.":[162]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}